CVE-2017-12418
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c.
- Actualiza a 8:6.7.7.10-6ubuntu3.11
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de imagemagick · Página 7
Vulnerabilidades publicadas para imagemagick en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 321
CVE-2017-12140
The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file.
- Actualiza a 8:6.7.7.10-6ubuntu3.11
Publicación Actualizaciónimagemagick regression
USN-3363-1 fixed vulnerabilities in ImageMagick. The update caused a regression for certain users when processing images. The problematic patch has been reverted pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
- Actualiza a 8:6.7.7.10-6ubuntu3.9
Publicación ActualizaciónCVE-2017-11640
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c.
- Actualiza a 8:6.7.7.10-6ubuntu3.11
Publicación ActualizaciónCVE-2017-11639
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h.
- Actualiza a 8:6.7.7.10-6ubuntu3.11
Publicación ActualizaciónCVE-2016-7539
Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
- Actualiza a 8:6.7.7.10-6ubuntu3.2
Publicación ActualizaciónCVE-2017-11537
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.
- Actualiza a 8:6.7.7.10-6ubuntu3.11
Publicación ActualizaciónCVE-2017-11535
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c.
- Actualiza a 8:6.7.7.10-6ubuntu3.11
Publicación ActualizaciónCVE-2017-11533
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c.
- Actualiza a 8:6.7.7.10-6ubuntu3.11
Publicación ActualizaciónCVE-2017-11530
The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11529
The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11528
The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11527
The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11526
The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11525
The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11524
The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11505
The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11478
The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11450
coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación ActualizaciónCVE-2017-11449
coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.
- Actualiza a 8:6.7.7.10-6ubuntu3.8
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.